guj.com
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number 49:2c:91:26:6e:48:c7:df:53:d2:44:ae:da:cb:59:e3 was issued on by ZeroSSL.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=guj.com
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): 49:2c:91:26:6e:48:c7:df:53:d2:44:ae:da:cb:59:e3Serial Number (int): 97265048748268433781843754070032734691
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 99:77:7c:16:8b:92:56:36:ae:4c:1b:0d:c5:3e:c7:5f:50:85:7a:74
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): ce:52:43:43:6c:c7:6b:c7:9e:eb:9d:61:d8:70:07:67:9c:c0:3f:99
Fingerprint (sha256): b9:14:f8:92:6d:97:7e:92:67:2e:fc:8e:77:14:c2:73:e0:47:c3:ef:ee:4d:80:dd:59:48:51:6e:bd:64:c4:17
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate guj.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for guj.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
guj.com
abo-gewinnen.de
content-finder.de
content-finder.eu
grunerundjahr.de
www.guj.com
abo-gewinnen.de
content-finder.de
content-finder.eu
grunerundjahr.de
www.guj.com
Other certificates including the domain name guj.com
(limited to 100 certificates)
gpi.guj.com
geo-wissen.de
guj.com
content-finder.de
grunerundjahr.net
guj.com
guido-magazin.de
guj.com
guj.com
guj.com
guj.com
view-magazin.de
guj.com
guj.com
ideat-germany.de
guj.com
guj.com
grunerundjahr.com
geoshop.de
guj.com
kinakoni.com
impfen-gegen-corona.eu
guj.com
guj.com
guj.com
guj.com
elterngrusskarten.de
guj.com
geo-saison.de
guj.com
guj.com
haeuser.de
guj.com
guj.com
brigitte-mom.de
guj.com
guj.com
gpi.guj.com
guj.com
guj.com
guj.com
guj.com
geo-special.de
fuerjedentag.com
grunerundjahr.org
geo-wissen.de
guj.com
content-finder.de
grunerundjahr.net
guj.com
guido-magazin.de
guj.com
guj.com
guj.com
guj.com
view-magazin.de
guj.com
guj.com
ideat-germany.de
guj.com
guj.com
grunerundjahr.com
geoshop.de
guj.com
kinakoni.com
impfen-gegen-corona.eu
guj.com
guj.com
guj.com
guj.com
elterngrusskarten.de
guj.com
geo-saison.de
guj.com
guj.com
haeuser.de
guj.com
guj.com
brigitte-mom.de
guj.com
guj.com
gpi.guj.com
guj.com
guj.com
guj.com
guj.com
geo-special.de
fuerjedentag.com
grunerundjahr.org
Certificate
The complete raw certificate details for guj.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsTCCBJmgAwIBAgIQSSyRJm5Ix99T0kSu2stZ4zANBgkqhkiG9w0BAQwFADBL MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMTEwMzAwMDAwMFoXDTI0 MDIwMTIzNTk1OVowEjEQMA4GA1UEAxMHZ3VqLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMHKn8GaAWp5YKvoQqT/JLje4+oK2ymTevJvyHbGDYk4 tG/+dxafOCuYr5vhXyLat7AFviQdL2SYR0MRcsaCW1SU6qdmovcbJUlBlIIAcIsn sVvAndLmPqKLWSyPCV/cCIEMXV1RwXb/R+XwK5S5ktADSO415Sf2Ec2szQDGF5re yHWihD8Cw3H6BD3dMX8u4E5ehT9WvFGZLUEpPfzDa1F6+iM7OlCKyyTs9yhbFda/ Zg/XPmX55UHJmqlIncLLGNbPBwiX2m4M4hW+UDqDHcXzUzeKisPp3yrX1E4gOHT0 krzesXXSCVjLEmhB2pwCH1nnTwLDsb/59HmrcuZppQkCAwEAAaOCAsgwggLEMB8G A1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoamMB0GA1UdDgQWBBSZd3wWi5JW Nq5MGw3FPsdfUIV6dDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIx AQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZn gQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0cDovL3plcm9z c2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FEb21haW5TZWN1cmVTaXRlQ0Eu Y3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNlY3RpZ28uY29t MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp 3GhCCp/mZ0xaOnQAAAGLl2LU/wAABAMARjBEAiAuy6ncmLphn0Yg2W9iRjSAQZcN B7lVj2DdPo26wi3IqwIgPtulaGAIb7X8E3crZucodJQxZKLbICRGbUE3Aj6LNU8A dgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYuXYtWHAAAEAwBH MEUCIQCZNr4aktpgvhasVAaNityN11M6cItQ6iFgJ4yzfsB4NwIgV/AtOuzyHS/h TQjnHvV/IAsp6AfUp8l1ephx8TJxGUcwaAYDVR0RBGEwX4IHZ3VqLmNvbYIPYWJv LWdld2lubmVuLmRlghFjb250ZW50LWZpbmRlci5kZYIRY29udGVudC1maW5kZXIu ZXWCEGdydW5lcnVuZGphaHIuZGWCC3d3dy5ndWouY29tMA0GCSqGSIb3DQEBDAUA A4ICAQAZnR1mAgByOGjykCxb3FUNM/NRQga0Vc4modWUpm/0DMHlG+vQBw1bIp8E k8mQSlCwtTxIVYofUXlW4hYUuh9dEKN0NZ/CZquL/nqtfVuhmjk2qEDWB5SnBXAP UJqtovOkRyks43XuUhuOmNXLhUGRy6chGdYaJ+hKSKCbNB8K54FeFL4UaW9uDXuN 1+Xji/IewQuU2dU4EgSKvCyL0MpESusGyrAdg1r55cQG3595QvEiH36O8+L/D7xb I1D8XDoVYrwS6nb+TuXpRDO/SkA8/E2n+GpaoJrKGv8/nuLgnQmZs75Ifih/9vOf M0173A9casY8h91fYdfW7952z/PwQkDRCkVR9b5uGQWv/p5POxxR5qckLVl+t9/T 0Bdj20dpAfMbI2LKHxCw4P+6gdV0hPNZOCgGbVvZ7F5I/zHnBVtK9W5ZspVHhbNa f1RjS+1JyV0qLM1OEtYCz7XHUo8q0c53AIg8jjOYGifA3Ogu/oAo+9l9vyJ0Z7U5 AbJ86jtDnSoGdTuzFDctNnJcuo1w90aAOMX4WB+8ynD2WxRCQB/1/RBpsOBA2ZOu oGObkUR5GoLwP/+SF4bW8n+9XErj6Wgf5ZV1B4wn+FPaAebBRuiv6s0rFc3lkwOP 6JmYWeceG30f1ot2pI5DBIllmWXgutCRJeW4O9deeDiSoem8SQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcqfwZoBanlgq+hCpP8k uN7j6grbKZN68m/IdsYNiTi0b/53Fp84K5ivm+FfItq3sAW+JB0vZJhHQxFyxoJb VJTqp2ai9xslSUGUggBwiyexW8Cd0uY+ootZLI8JX9wIgQxdXVHBdv9H5fArlLmS 0ANI7jXlJ/YRzazNAMYXmt7IdaKEPwLDcfoEPd0xfy7gTl6FP1a8UZktQSk9/MNr UXr6Izs6UIrLJOz3KFsV1r9mD9c+ZfnlQcmaqUidwssY1s8HCJfabgziFb5QOoMd xfNTN4qKw+nfKtfUTiA4dPSSvN6xddIJWMsSaEHanAIfWedPAsOxv/n0eaty5mml CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 97265048748268433781843754070032734691 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guj.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24463910500438353842935018623979569882759564918406013651254200795424272926626572020384352987542159353010669535906464097510575967842065732679559373980623272767857752158898033381829658852084331972486075219553433519280242438731271442529252235803649831028228781505838489989167084273808670396415084912233101880704511910989386768217863552849105306262225909957051153633005567934048442104124611896769074300745711719231258156106339399614443737855605972389119338373701370953637157028062928511683733077436966839649799172609433255672865378397969304902075141979994009671833257748944759447100691437911217464035672984745282003117321 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 99777c168b925636ae4c1b0dc53ec75f50857a74 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b9762d4ff000004030046304402202ecba9dc98ba619f4620d96f6246348041970d07b9558f60dd3e8dbac22dc8ab02203edba56860086fb5fc13772b66e72874943164a2db2024466d4137023e8b354f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9762d58700000403004730450221009936be1a92da60be16ac54068d8adc8dd7533a708b50ea2160278cb37ec07837022057f02d3aecf21d2fe14d08e71ef57f200b29e807d4a7c9757a9871f132711947 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo-gewinnen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-finder.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-finder.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grunerundjahr.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guj.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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